VulnerabilityModified

CVE-2009-2741

Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors.

HIGH 10.0EPSS 3.28%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 3.28% probability · 88th percentile
CISA KEV: Not listed
Affected: ibm/websphere business events
Source: cve@mitre.org

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367
https://exchange.xforce.ibmcloud.com/vulnerabilities/53189
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56367
https://exchange.xforce.ibmcloud.com/vulnerabilities/53189

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.